Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Bo4x7xH1qaa7_nhPBNaXAqJTji8.roa
File: Bo4x7xH1qaa7_nhPBNaXAqJTji8.roa (raw, json)
Hash identifier: +7HoUFQxacgRAM+dyIiJn2LBX+466oqiWKNKqcX7QFk=
Subject key identifier: 06:8E:31:EF:11:F5:A9:A6:BB:FE:78:4F:04:D6:97:02:A2:53:8E:2F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0CD0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Bo4x7xH1qaa7_nhPBNaXAqJTji8.roa
Signing time: Tue 29 Sep 2020 09:53:51 +0000
ROA not before: Tue 29 Sep 2020 09:53:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3280 (0xcd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:53:51 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=068E31EF11F5A9A6BBFE784F04D69702A2538E2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:03:c7:cc:d8:58:f2:f3:10:d8:00:eb:04:d5:
af:f0:7b:8a:60:a5:7b:38:e7:02:20:e0:c2:10:b5:
9b:4e:99:da:5b:47:7b:04:8a:b9:53:18:db:0b:fa:
55:8a:93:e4:99:09:15:d2:0a:a7:d6:b3:e2:88:4c:
e8:df:c7:28:76:cb:76:d4:ef:a9:d3:74:5c:6a:3b:
6f:4b:3b:f4:7f:ca:65:ef:59:cd:ad:ea:14:91:7f:
bb:89:0f:fc:a4:5d:e1:35:aa:b2:67:04:3c:a6:94:
98:37:d1:6d:61:eb:b6:36:b1:aa:aa:98:12:fb:36:
31:b7:bc:d0:f4:21:ad:90:99:08:7b:ad:c7:e7:b7:
73:a2:b8:22:db:0e:b7:69:75:dd:d2:98:f3:0f:46:
12:76:b1:61:c7:21:f7:23:4a:6a:4e:ac:55:49:24:
14:26:9b:02:8e:be:9c:62:83:5c:7f:bf:5f:d0:d2:
9d:ef:ff:eb:b4:bc:52:e4:71:be:79:a4:ea:37:a3:
fd:cd:80:33:e2:a7:90:12:aa:0c:79:75:9f:dc:5f:
fb:65:ea:4a:dc:d1:46:5f:a9:b3:fc:43:15:82:29:
01:57:90:33:51:b0:ec:f2:b9:01:d8:c9:3e:f6:5e:
88:84:e3:46:ff:66:99:d7:87:58:a9:00:ed:cf:c8:
7a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8E:31:EF:11:F5:A9:A6:BB:FE:78:4F:04:D6:97:02:A2:53:8E:2F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Bo4x7xH1qaa7_nhPBNaXAqJTji8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.252.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:0d:bc:cd:79:10:d9:45:8b:0a:cf:a9:73:34:18:ca:18:b4:
17:b4:17:ce:06:13:b6:c6:ee:a1:54:fa:84:76:dd:2e:36:26:
5b:f2:76:f0:7f:b3:bc:d3:97:b1:5a:b1:f9:fc:d5:a6:9a:04:
c2:ab:a3:ad:5a:8e:d2:6e:14:41:09:11:1b:33:fd:03:d2:ad:
9c:74:0e:cd:2d:b6:0d:28:78:39:5f:19:b3:72:be:82:c3:40:
4a:e3:8a:68:f0:1b:7c:b0:6e:b4:0d:87:0c:31:3a:aa:cc:57:
a3:1e:2e:a8:23:65:e5:8f:4f:2b:11:73:b6:7e:0e:59:f9:c2:
24:66:57:72:38:86:fb:32:e9:d3:ef:d7:c5:c5:f8:8a:eb:18:
d5:c0:90:a2:4b:ea:16:ce:35:62:bd:28:ec:51:e3:b0:89:71:
89:23:ce:32:dd:52:44:96:3d:3c:00:e1:da:44:6b:0b:5b:63:
f0:16:2f:ea:56:55:bf:fb:d6:b4:1f:66:ca:39:54:5a:96:b4:
db:a4:16:20:66:6f:1c:bc:3b:47:a0:8e:d7:90:1a:d7:31:66:
07:12:de:7c:cb:50:34:9f:67:b1:26:90:41:a4:d2:c8:df:12:
ec:51:b9:ee:2f:4b:0b:be:fe:57:11:4c:fa:7e:4c:3f:43:29:
e2:09:87:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org